
The Honorable Malcolm Baldridge 
The Secretary of Commerce 
14th and Constitution Avenue 
Washington, D. C. 20230 

Dear Malcolms 

In a letter to Dr. Jordan Bariich, former Assistant .secretary 
Productivity, Technology and Innovation, Department oi 

dilid * Hovember (980, tbl. Agency. s former Deputy 
Director (or Administration, Mr. Eon. Wortman, requester, teat the 
Denar tment delegate to the Director of Central intelligence <DoI) 
iiideoendent author ity to grant, for this Agency, waivers of the 
provisions of Federal Information Processing Standarcs tvIPur 
promulgated by the Department. The letter set forth various , 
security concerns which are raised by the current FIPS waiver 
procedures and explained the delegation of procurement authority 
which, on account of similar concerns, the Agency has ootam^ 
from the General Services Administration. Vie have received no 
formal response to this request and because oi the importance I 
attach to it, I would like to take this opportunity to reiterate 
our concerns and the straightforward procedure tnat I believe 
will alleviate them. 

As you know, requests for waivers from FIPS, depending on 
the standard, oi therrequire coordination in advance with the 
Department, or your approval. In order to support a ^uivei 
reauest-, extensive documentation is typically r^qut.ed oj t« - 
Department * For example, one group of H?& 

expl ieTtly describe what must be included in a waiver request: 

»i) a deccr iption of the exi.ting or planned ADP system for 
which the waiver is being requester, 2) a description of the 
system configuration, identifying tnose items for vrhicn tne 
waiver H being requested, and including a description of planned 
exoans ion of the system configuration, at any time curing its lue 
cve"; and 3) a justification for the waiver, inducing a 
hiscr lotion and discussion of the major adverse economic or 
operational impact that would result through contorniance to this 
standard as compared to the alternative for which tne waiver is 
requested. ” 
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waiver request procedure is cause for considerable 
security concern to senior CIA management • Under the nta.tut.ory ~ 
provisions of the National Security Act of 1947, as amended, 

L'CI is charged with the responsibility for protecting;: - l 
in tel licence sources and methods* Relating this to current end 
anticipated acquisitions of automatic data processing equipment 
(AUPE) , it is our considered judgment that disclosure through ^ 
the waiver process of the Agency*® capabilities and. location or 
its resources, would not only adversely affect the proper-^ 
discharge of thin responsibility but would also#, in some- biises, 
represent a crave threat to national security* Cue ASPir, .wne tscr 
general purpose or unique to our requirements, is utilized for 
extremely sensitive intelligence information "process ir,g r £ 
communications, and real-time in tel ligence-opera tiers 
requirements. The type and location cf equipment represent, for 
foreign intelligence agencies, prime targets in terms of 
operational utilisation, equipment capabilities, or the 
readability of signal emanations. Of equal significance is the 
fact that, in certain instances, identification with the Agency 
of specific equipment or sites of operations could be extremely 
embarrassing to the United States or to friendly foreign r . 

governments. 

It is ray firm opinion that a delegation of independent FIPS 
waiver authority to the Director of Central Intelligence tilth 
appropriate rede. legation authority would best protect the •.( 
national security interests involved in the acquisition and use 
of ADPE by the Central Intelligence Agency for intelligence 
information processing, communications and intelligence 
operational applications. I therefore request that the secretary 
of Commerce delegate to the DC I independent authority to grant,; 
for this Agency, waivers of the provisions of Federal Information 
Processing Standards promulgated by the Department of Commerce. \ 

V 

Your favorable consideration of this request will foe t •- 

sincerely appreciated. I would be pleased to make available the. 
ajsprcpriate Berbers of my staff to develop in conjunction wit,, 
vour representatives a suitable delegation of waiver authority* 


My Director of Data Processing, Mr. sruce T. Johnson, is 
available to a nswer any techn ical questions you may have. 
STAT be reached at 
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Yours , 


/sl William X Gassy 

£ | 0^br>Bi William J. Casey 

EH 


Approved For Release 2004/05/05 : CIA-RDP84-00933R0004001 40044-7 






